Repository Index

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

Remote forensics meta tool

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

Docker Scout CLI

• docker
• security
• supply-chain-security

:hammer: Manage your website via terminal

• php
• security-tools
• python
• pentest

Zero Infrastructure Password Cracking

• cloudtopolis
• cracking
• hashes
• cloud

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

• hacking-tools
• bash
• git-dumper
• pentesting

Operational information regarding the 2026 php2shell vulnerabilities

Scans for accessibility tools backdoors via RDP

A modular OSINT honeypot for blue teamers

A Suricata Docker image.

• suricata
• ids
• nsm
• docker

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

Script for automating Linux memory capture and analysis

Automated Tactics Techniques & Procedures

• empire
• tactics
• procedure
• cybersecurity

Small set of tools for helping with reverse engineering Linux drivers

:hammer: A multiple reverse shell session/client manager via terminal

• socket
• python
• ctf
• attack-defense

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

Secure shell history commands by finding sensitive data

• rust
• shell
• bash
• security

PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE

:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365

A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made

A blade runner for your network. Detects shadow AI agents before they go rogue.